DNSSEC Analyzer

Domain Name:

Time: 2019-06-25 16:18:02 UTC, NTP stratum 4

Analyzing DNSSEC problems for PKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (1139 bytes) ;; HEADER SECTION ;; id = 506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190711000000 20190620000000 20326 . LeNUOIxGGe+xAKxr13YIXNqMAxVH7RuDXQyVclUuxA9aENp0+yYkeIL+/lkTteEhdHXNVZqYch8Q rvcsuCpDN2gKx5D5M04gKAjR5ywgvEdsZHr9DhjCZ3uvXKvbPsi614QpjYCxxvtq/ZZE6dhm59K3 N3T8Mhm5l36b6w+fR1F3Kc+eeJqy2ZjVxNe9CClE4Qy6q78Yu6rS1vZkuzG1l2AT9Gko72StWbds U2Ry9fBk+uCJOLxej37z5Rfi5EAzFcnfwQYryqCRt2go9PuD0/AulqG8wmTVz23tnwnaxowkYKxF H2yE0d7pDiFjvOyUHdGPXYwl/+GDmjrQsN6JPQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190711000000 20190620000000 20326 . LeNUOIxGGe+xAKxr13YIXNqMAxVH7RuDXQyVclUuxA9aENp0+yYkeIL+/lkTteEhdHXNVZqYch8Q rvcsuCpDN2gKx5D5M04gKAjR5ywgvEdsZHr9DhjCZ3uvXKvbPsi614QpjYCxxvtq/ZZE6dhm59K3 N3T8Mhm5l36b6w+fR1F3Kc+eeJqy2ZjVxNe9CClE4Qy6q78Yu6rS1vZkuzG1l2AT9Gko72StWbds U2Ry9fBk+uCJOLxej37z5Rfi5EAzFcnfwQYryqCRt2go9PuD0/AulqG8wmTVz23tnwnaxowkYKxF H2yE0d7pDiFjvOyUHdGPXYwl/+GDmjrQsN6JPQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	DNSKEY=25266 is now in the chain-of-trust
	Query to l.root-servers.net for PKI.GOV/A
	Received 662 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (662 bytes) ;; HEADER SECTION ;; id = 16021 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (661 bytes) ;; HEADER SECTION ;; id = 55837 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to e.root-servers.net for GOV/DS
	Received 403 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (403 bytes) ;; HEADER SECTION ;; id = 60841 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 53940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190701214731 20190616214231 7698 gov. gr3SMpnqXuv1bmrBjl6FAfUBvevP1IZX6nHz+ka815FjVHQX48JOHZv7lLJ8J1JMT2TxzbvUsdcU fE0JSvtMF6Dt97g4f4t4A3dtXGzDnsipCY2uOXa7ACncWiLjOjYiXxjUhsZjqS3epq0WQExuvUFU DTwTuZdx+qsU8b9gzzWjD8DDeE3Ri8utmMaMM8+5sxfqtBlqZmI9tjRJ6a4P2yV8RXWpZzlp6bRi yheZTE2RTru+NhrZ/LFtyC1M66lpS7r7T9iy6sDnbALVuo6kRfMy8PGL0mDbWitWO1Hi+NDEkaaQ hSSCo3Iv9oidW08kEV89hTlhH9Nh8oeo86bHog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190701214731 20190616214231 7698 gov. gr3SMpnqXuv1bmrBjl6FAfUBvevP1IZX6nHz+ka815FjVHQX48JOHZv7lLJ8J1JMT2TxzbvUsdcU fE0JSvtMF6Dt97g4f4t4A3dtXGzDnsipCY2uOXa7ACncWiLjOjYiXxjUhsZjqS3epq0WQExuvUFU DTwTuZdx+qsU8b9gzzWjD8DDeE3Ri8utmMaMM8+5sxfqtBlqZmI9tjRJ6a4P2yV8RXWpZzlp6bRi yheZTE2RTru+NhrZ/LFtyC1M66lpS7r7T9iy6sDnbALVuo6kRfMy8PGL0mDbWitWO1Hi+NDEkaaQ hSSCo3Iv9oidW08kEV89hTlhH9Nh8oeo86bHog== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to d.gov-servers.net for PKI.GOV/A
	Received 493 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (493 bytes) ;; HEADER SECTION ;; id = 48412 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI.GOV. 86400 IN NS dns1.PKI.GOV. PKI.GOV. 86400 IN NS dns2.PKI.GOV. PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2 PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 ) PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791 PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. Gb9yMA5NRGQjFkd/H7HC0ISLD/5tJIrwqh/pyY5wEN17Y0OObRz40uSMPP01XLcD4VjwKPaJx+gD zFHoK/RoR/cvWX7FoAjvGBNDo4xpPzEX+5QHphakmGoe9Sdb8I+tW8GdPywIehi7yih2+JivA8UW 0xsN/12BjYRGhKdTCCY= ) ;; ADDITIONAL SECTION (5 records) dns1.PKI.GOV. 86400 IN A 199.167.92.100 dns2.PKI.GOV. 86400 IN A 199.167.93.100 dns1.PKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.PKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to d.gov-servers.net for PKI.GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for PKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 493 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (493 bytes) ;; HEADER SECTION ;; id = 24030 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI.GOV. 86400 IN NS dns1.PKI.GOV. PKI.GOV. 86400 IN NS dns2.PKI.GOV. PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2 PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 ) PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791 PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. Gb9yMA5NRGQjFkd/H7HC0ISLD/5tJIrwqh/pyY5wEN17Y0OObRz40uSMPP01XLcD4VjwKPaJx+gD zFHoK/RoR/cvWX7FoAjvGBNDo4xpPzEX+5QHphakmGoe9Sdb8I+tW8GdPywIehi7yih2+JivA8UW 0xsN/12BjYRGhKdTCCY= ) ;; ADDITIONAL SECTION (5 records) dns1.PKI.GOV. 86400 IN A 199.167.92.100 dns2.PKI.GOV. 86400 IN A 199.167.93.100 dns1.PKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.PKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone PKI.GOV

PKI.GOV

	Checking DS between GOV and PKI.GOV
	Query to d.gov-servers.net for PKI.GOV/DS
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for PKI.GOV/DS: 'IPv6 transport disabled'
	Received 367 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (367 bytes) ;; HEADER SECTION ;; id = 58253 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DS ;; ANSWER SECTION (5 records) PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2 PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 ) PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791 PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. Gb9yMA5NRGQjFkd/H7HC0ISLD/5tJIrwqh/pyY5wEN17Y0OObRz40uSMPP01XLcD4VjwKPaJx+gD zFHoK/RoR/cvWX7FoAjvGBNDo4xpPzEX+5QHphakmGoe9Sdb8I+tW8GdPywIehi7yih2+JivA8UW 0xsN/12BjYRGhKdTCCY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for PKI.GOV in the GOV zone
	DS=23245/SHA-1 has algorithm RSASHA256
	DS=23245/SHA-256 has algorithm RSASHA256
	DS=55612/SHA-1 has algorithm RSASHA256
	DS=55612/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. Gb9yMA5NRGQjFkd/H7HC0ISLD/5tJIrwqh/pyY5wEN17Y0OObRz40uSMPP01XLcD4VjwKPaJx+gD zFHoK/RoR/cvWX7FoAjvGBNDo4xpPzEX+5QHphakmGoe9Sdb8I+tW8GdPywIehi7yih2+JivA8UW 0xsN/12BjYRGhKdTCCY= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=23245/SHA-1 is now in the chain-of-trust
	DS=55612/SHA-1 is now in the chain-of-trust
	`PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2`
	`PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 )`
	`PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791`
	`PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 )`
	Query to dns1.PKI.GOV for PKI.GOV/DNSKEY
	Error querying dns1.PKI.GOV/2620:9b:c000:9200:12:0:0:30 for PKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2320 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (2320 bytes) ;; HEADER SECTION ;; id = 17386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc85vLo9I8xrTAzeK2PF3wrnIo7Z66tgjLM0y1AktZ44XY9owbfASCeAvdbg8RTT+RMIPaku 9rY7Sy5wzMIGUTmgBr/9VZbTLNLdsWoxs9/kpZ25JsCASvq/Pd4TjqEcRP9dD3x9nho5aP1g+D8E hE5mxR2BATelwacHh+N+kv9j0fOuVA+E3fHTXf2PaX1Glw5tKikaPCr4aJ58Cniu65oEmmiGXgva XCnu4nDLMP0lZ2c5fKh9Vhe4QzdK6P+mr2YFMKocAKKvf3pVs+75Rlcr8vn4Dew/9bIfCVO9OAsc UR4yUreenTL7UX9R+gciEXCsJ6E67fDRqnEWCATEAG0= ) ; Key ID = 28950 PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbhIMrVIm9UEISS7OYiU68uL6qcvK2uy/WbQyK3r28nYGzcH+WgXmbv3R03NWsT+jNwghlIk f+diK3K7zc+a6zKxuYTcNsBXR4Dt1/RBYZx1F6wes5H0hdz23wrCEC7NZBVbYVcOhRvj5U4zND3H g9ZNy82CyMYe5iLzxvmBOS57KysaIi8CmtvBs2d7vE6xVPCSFBJkaQmM5IZ5vsd/RK8zeCmEH5zE gb1rLXcMwPa+2cvm3MyLoZYXixh+kfW8m+LXw9J1z6dvmK3dqaetXeXNbIZsKY5Rn3Pb8XP5IPDC NbOTxh/6vPgE2UR4fvEAWEhKEw3ZXwaQBE++qRzG2AE= ) ; Key ID = 35721 PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbV34PXpVZ82jZoA7+MPoD1U+IP6KsD4OcycHamdD0Jf/WAos1s/xAbmGXzzOl2CgtayxxKp /nEFY8N1YJsV8DUUyV1GW6GtNsXaLQnG045Z5B/IbJtn9NwPXAAzSyYRr8V7CRlIfIwTnjPhcR0K CoW9X+uLJqUH6S3XQ792057zU1GnzMRPVVpnBTMaKnzMZRqwsEORukD/2xbrQVkZycftC/JCaPSR lHyyrQcj8IoyByYWJc8gi5tsS9k1S8iJHgzp+t60EI04/poIfkn+PnULNLmBFOpAdOgpvD93JsJn 7jhZ6nJ8XZUVwvEoqkAynwkCMaiTp08zfy2kdyxamNs= ) ; Key ID = 55612 PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZEnNk1nNHzYqxAA9j2D6pjYhaToz/Z2bwjvGnn9m1N7V+qUjqvd2YUzroD1o8g7U6ZDkQJV tFr4CeLq0rdExqGhrA4+7XTWaV+h6K2sXtvXkIATlo1efabYlTo6ZrWiBVTaehzhZb1otKABiuYm 27H6K2XMOjfrrAcPkYoGpKqXktw8sQZDKYzJ/94mqqzA9K0S9yUrXYzRr1c7ysI01uRIhJ/CGja6 6PdrOJRLOPv3zdqFCBMWDZubxNQHCj/Bb2b9/X5OyPtYuFaiRNuC+YsSFeKBWybcXLFLzPspULmL 6VJ+/NoE3cWzItCx1E0849nj8BONkAyfC3HdtAKfLy8= ) ; Key ID = 23245 PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190701215708 20190624215708 28950 pki.gov. QkxyuG6Ont47JRCp/OJMWboAihfEE+UBU9l+wg2oZxurL67q1UuTFvWHwodB5N9raJuooZZCb6bz sTJoKQStbsSdmzDEVTeMzP857fMQZhu6GtgqYCRzUAfwiFOknHYwNw5i12QwVJc1ngnzjGkPm9n5 NTRNOo4RqxZsjEaUk1K/7NWk9girmEVGjfV2Ei6Zi2SJg8fFt3kd5rLKiU9huK43DF1fpyqN5hBh UpXkyweeF5/DYsyHgTvY9Zx/xZxwJp2wNeBsIAPeKB2coKdHz1+M9bZB4JAP1eEdCJXnYnSKNQdH Lxd4SszpfQEC6dx+jw/O4726lsKCuFrVInqpqA== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190701215708 20190624215708 35721 pki.gov. C1O/u4VlK6HI3EGGYA8q1I5SbrIR76/Z1oB2HcLGha6NwqxE5cwhG0MCYW0Zf9xcLfw9//OxnHBY eejyshxMNYeOVK8GTE9PIPm8MWS0E9F/w2xCnLUNNFI7PSGNfAEFcduHjBupuEYpjBiOVcHG4WCg 3kw81unUWm1fnKDX8lfam7g67zParcjz97s9BvqzlPLv4trZoT1SAWRi7CSEZtcqETi5yaf+4kH2 FRhCjeOy9lwJVksJ3hdOJGwvjYVUFNsYd1D2b7dZJ8LNlYEAQAFPGztjQX8qQbDGMbRJvMiRXNYx DN5kCmP8S0fM3m/Ade4TikTv2Hs6DJ0PbzOiXA== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190701215708 20190624215708 55612 pki.gov. Oub/BpwdygygvV0BjK1VIUvVBd4NigSmMmBtgPemFWkpgg7CobIYzb3PcQsQUUGMuhn1EU5mHuQZ h2mzEVHGplG+ngBxT0/Ouu8xjBF7A6Pauh35tuJsk5FRapizGrEadb1wczqmKK0UbXZxkPYeHAjB q8ryqe261l7lTJltoBlC4AgPSVMcAwB4ZdJpj+ibZ2kvzv8GrvHhSfFM389IPgajqs2L3JqhLoik ub/1VpjXyskToIu1T81OpvrZR6DD7CQhcD4Gtxp8Vf37Bc6sC/8B5ICIRfBzCa3dl+hvdVbwu++2 328RlWJyH5EulDogOV8u3teyuyZ2TwofruWHbg== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190701215708 20190624215708 23245 pki.gov. KicM+U1nGy7jQnRm8IPPr18SZ86ku9RGoD6oSpSY7Wp6NbxUVFM9KjnvirtN+6xkOFW1xPQTpo+D 6Izva98cZAv/JGpdwmegz1SlSOlDGEM3HUY4KKR2WL4RCsn1jr51MFVXcdFhz9QwTb7vEVj1sghW gybQru6QDgddCLGLCOG2AoSAA9QIGEKGZs013d79J4RHX5/NwZtztob3h4KZa+H2ItTuSIOSo/rC FtREXXqwAGB1+q6mOgK8WiB7vjoNWxLA4/m8Gqt7QpVH1NSBmOQRhmrh74u/l0XAKbbuJ8+LXH44 E7LFvk55sy3x5DnqP7AFxV3N3pDsvt8WnyEFfw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for PKI.GOV
	`PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc85vLo9I8xrTAzeK2PF3wrnIo7Z66tgjLM0y1AktZ44XY9owbfASCeAvdbg8RTT+RMIPaku 9rY7Sy5wzMIGUTmgBr/9VZbTLNLdsWoxs9/kpZ25JsCASvq/Pd4TjqEcRP9dD3x9nho5aP1g+D8E hE5mxR2BATelwacHh+N+kv9j0fOuVA+E3fHTXf2PaX1Glw5tKikaPCr4aJ58Cniu65oEmmiGXgva XCnu4nDLMP0lZ2c5fKh9Vhe4QzdK6P+mr2YFMKocAKKvf3pVs+75Rlcr8vn4Dew/9bIfCVO9OAsc UR4yUreenTL7UX9R+gciEXCsJ6E67fDRqnEWCATEAG0= ) ; Key ID = 28950`
	`PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbhIMrVIm9UEISS7OYiU68uL6qcvK2uy/WbQyK3r28nYGzcH+WgXmbv3R03NWsT+jNwghlIk f+diK3K7zc+a6zKxuYTcNsBXR4Dt1/RBYZx1F6wes5H0hdz23wrCEC7NZBVbYVcOhRvj5U4zND3H g9ZNy82CyMYe5iLzxvmBOS57KysaIi8CmtvBs2d7vE6xVPCSFBJkaQmM5IZ5vsd/RK8zeCmEH5zE gb1rLXcMwPa+2cvm3MyLoZYXixh+kfW8m+LXw9J1z6dvmK3dqaetXeXNbIZsKY5Rn3Pb8XP5IPDC NbOTxh/6vPgE2UR4fvEAWEhKEw3ZXwaQBE++qRzG2AE= ) ; Key ID = 35721`
	`PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbV34PXpVZ82jZoA7+MPoD1U+IP6KsD4OcycHamdD0Jf/WAos1s/xAbmGXzzOl2CgtayxxKp /nEFY8N1YJsV8DUUyV1GW6GtNsXaLQnG045Z5B/IbJtn9NwPXAAzSyYRr8V7CRlIfIwTnjPhcR0K CoW9X+uLJqUH6S3XQ792057zU1GnzMRPVVpnBTMaKnzMZRqwsEORukD/2xbrQVkZycftC/JCaPSR lHyyrQcj8IoyByYWJc8gi5tsS9k1S8iJHgzp+t60EI04/poIfkn+PnULNLmBFOpAdOgpvD93JsJn 7jhZ6nJ8XZUVwvEoqkAynwkCMaiTp08zfy2kdyxamNs= ) ; Key ID = 55612`
	`PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZEnNk1nNHzYqxAA9j2D6pjYhaToz/Z2bwjvGnn9m1N7V+qUjqvd2YUzroD1o8g7U6ZDkQJV tFr4CeLq0rdExqGhrA4+7XTWaV+h6K2sXtvXkIATlo1efabYlTo6ZrWiBVTaehzhZb1otKABiuYm 27H6K2XMOjfrrAcPkYoGpKqXktw8sQZDKYzJ/94mqqzA9K0S9yUrXYzRr1c7ysI01uRIhJ/CGja6 6PdrOJRLOPv3zdqFCBMWDZubxNQHCj/Bb2b9/X5OyPtYuFaiRNuC+YsSFeKBWybcXLFLzPspULmL 6VJ+/NoE3cWzItCx1E0849nj8BONkAyfC3HdtAKfLy8= ) ; Key ID = 23245`
	DNSKEY=55612/SEP is now in the chain-of-trust
	DS=55612/SHA-1 verifies DNSKEY=55612/SEP
	DS=55612/SHA-256 verifies DNSKEY=55612/SEP
	DNSKEY=23245/SEP is now in the chain-of-trust
	DS=23245/SHA-1 verifies DNSKEY=23245/SEP
	DS=23245/SHA-256 verifies DNSKEY=23245/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190701215708 20190624215708 28950 pki.gov. QkxyuG6Ont47JRCp/OJMWboAihfEE+UBU9l+wg2oZxurL67q1UuTFvWHwodB5N9raJuooZZCb6bz sTJoKQStbsSdmzDEVTeMzP857fMQZhu6GtgqYCRzUAfwiFOknHYwNw5i12QwVJc1ngnzjGkPm9n5 NTRNOo4RqxZsjEaUk1K/7NWk9girmEVGjfV2Ei6Zi2SJg8fFt3kd5rLKiU9huK43DF1fpyqN5hBh UpXkyweeF5/DYsyHgTvY9Zx/xZxwJp2wNeBsIAPeKB2coKdHz1+M9bZB4JAP1eEdCJXnYnSKNQdH Lxd4SszpfQEC6dx+jw/O4726lsKCuFrVInqpqA== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190701215708 20190624215708 35721 pki.gov. C1O/u4VlK6HI3EGGYA8q1I5SbrIR76/Z1oB2HcLGha6NwqxE5cwhG0MCYW0Zf9xcLfw9//OxnHBY eejyshxMNYeOVK8GTE9PIPm8MWS0E9F/w2xCnLUNNFI7PSGNfAEFcduHjBupuEYpjBiOVcHG4WCg 3kw81unUWm1fnKDX8lfam7g67zParcjz97s9BvqzlPLv4trZoT1SAWRi7CSEZtcqETi5yaf+4kH2 FRhCjeOy9lwJVksJ3hdOJGwvjYVUFNsYd1D2b7dZJ8LNlYEAQAFPGztjQX8qQbDGMbRJvMiRXNYx DN5kCmP8S0fM3m/Ade4TikTv2Hs6DJ0PbzOiXA== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190701215708 20190624215708 55612 pki.gov. Oub/BpwdygygvV0BjK1VIUvVBd4NigSmMmBtgPemFWkpgg7CobIYzb3PcQsQUUGMuhn1EU5mHuQZ h2mzEVHGplG+ngBxT0/Ouu8xjBF7A6Pauh35tuJsk5FRapizGrEadb1wczqmKK0UbXZxkPYeHAjB q8ryqe261l7lTJltoBlC4AgPSVMcAwB4ZdJpj+ibZ2kvzv8GrvHhSfFM389IPgajqs2L3JqhLoik ub/1VpjXyskToIu1T81OpvrZR6DD7CQhcD4Gtxp8Vf37Bc6sC/8B5ICIRfBzCa3dl+hvdVbwu++2 328RlWJyH5EulDogOV8u3teyuyZ2TwofruWHbg== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190701215708 20190624215708 23245 pki.gov. KicM+U1nGy7jQnRm8IPPr18SZ86ku9RGoD6oSpSY7Wp6NbxUVFM9KjnvirtN+6xkOFW1xPQTpo+D 6Izva98cZAv/JGpdwmegz1SlSOlDGEM3HUY4KKR2WL4RCsn1jr51MFVXcdFhz9QwTb7vEVj1sghW gybQru6QDgddCLGLCOG2AoSAA9QIGEKGZs013d79J4RHX5/NwZtztob3h4KZa+H2ItTuSIOSo/rC FtREXXqwAGB1+q6mOgK8WiB7vjoNWxLA4/m8Gqt7QpVH1NSBmOQRhmrh74u/l0XAKbbuJ8+LXH44 E7LFvk55sy3x5DnqP7AFxV3N3pDsvt8WnyEFfw== )`
	RRSIG=28950 and DNSKEY=28950 verifies the DNSKEY RRset
	RRSIG=35721 and DNSKEY=35721 verifies the DNSKEY RRset
	RRSIG=55612 and DNSKEY=55612/SEP verifies the DNSKEY RRset
	RRSIG=23245 and DNSKEY=23245/SEP verifies the DNSKEY RRset
	DNSKEY=28950 is now in the chain-of-trust
	DNSKEY=35721 is now in the chain-of-trust
	Query to dns1.PKI.GOV for PKI.GOV/A
	Received 1356 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1356 bytes) ;; HEADER SECTION ;; id = 39282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190630203551 20190623203551 28950 pki.gov. B/EZPlFsWzX1S4dFRaTP7FVtNPzFLNgBmg1i6Z21oLXuD8i76vEGm6jFJlIrnFroFK1bsLlPd67O /RjYC3ENVE4pPE8eRoMetbjuXDRsolQM5MnRZDR7/BXgtfmoMQ1GTN8BRL7hc0/RgFMngpfvagtl XG5TyyRxUrMVQV5QjXky344qVKVrUJMdqlnPofolzSfTCHPccot1bxazIOuJoSU1jCBlKmgrp53I JIkS6MdZLjZ367NANdgy9+I9/gn3EyN4N8Q+fwTfHsmcJPGI2Ev+Hunuxo+lIHT6y1GGxxS9PlO2 0LcQ52qSI2qwDtH0VujNN4/85i0UFAAi3MtpoA== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701192513 20190624192513 35721 pki.gov. OujLdaPH+wx6J+pIAbdmYQhD/bdUCazhYhKJnQjhF2spkxP0VITDUNTrjvnZg6OADQ+RNhAfMXx6 dxJ54lIVTF/VK8AJgCDdkwvndR81SAnrRmI7PyLjC+1oHJ4FRejBLqRjcB80MCNeOq1n5lAqfDbv zj/KP2WCHloOEqobuGn4xDdSyG3q5swizRdReLJ726k3hXgx0yBnaqVzcLRSLaMao090W0ULX04+ +/kUuVGswgUzfBMpS8w/AFdou+QGbUSFRT5p0tATr5akmuuJhoObxfEde17RubV+0MlAjCr6gwhZ rau8UyIc3CG7pf8CDATIG8D623czZhvppywiww== ) 3gn6scbsh69tvo7k00bgtjd3cf4q4ihe.PKI.GOV. 86400 IN NSEC3 ( 1 0 1 f73aee8359aa4cf0 3gn6scbsh69tvo7k00bgtjd3cf4q4ihf NS SOA RRSIG DNSKEY NSEC3PARAM ) 3gn6scbsh69tvo7k00bgtjd3cf4q4ihe.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190630222506 20190623222506 28950 pki.gov. adU5M2E/74aI2GcrksWngkAMapq5YmPCoxD9B7M10l3l8MAlUR9wAIZSj8Aaf5Rusne64mCupq7j U8i2yX9lvg9E3+XHC2CJzDtEmfn0eGG9SWEIKItEZpiCXnkUeC635eNEgubXaExugjuSQAVpBqIN DZWX2IEqncxqrrzuTWZT98H9mZhQ8JtDGM+jEeTOPazCfLyWNXVIcwZpqCgDmptS4Kgp+ELG5G3f T/Y/V8ghoQLfgSbhiblfRcJ0pxgbVTCN8XD4IxUfGcwUtcv84gc4kuvsLWX5hEoouZga1fez6eBa cye0hFcTqKIGNwCds6lXpffERhbLvFt4Z26reg== ) 3gn6scbsh69tvo7k00bgtjd3cf4q4ihe.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190701215708 20190624215708 35721 pki.gov. LQF3xFBq8M5OvdAzWgO7VlupSrqMH/H6IF0m62FUJviyUrnkapZlRRBm2lGnF+Gg6Ea9E8/5/dFW iZre35R581D5jsGxPQb56vTlK0PlBHJcTpdbnXbFxElR7LVBLtC5vq/WTqU+RVDP13/u3ZvAawBF w4iPvBxfbXP8llZHRskfZPuJFZUiLEyRPJ2BHD7zmporX9C8ZB5cUuruLT8Sm7Mx76eVEHEE49/6 npxoBGduXi44nLMSY3fsWzb2wwAVEqTx92sV8Jioc+pn1rwFhjrvTOKCcf0bUWfDo+/uulcvET2r rd7d81Nq5LxvERCbdfvwIXiwKoTsm8oV+uaAow== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PKI.GOV is authoritative for PKI.GOV
	Found RRSIG signed by pki.gov zone
	Query to dns2.PKI.GOV for PKI.GOV/SOA
	Received 3749 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3749 bytes) ;; HEADER SECTION ;; id = 29427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190630193740 20190623193740 28950 pki.gov. ZyiAPjwFwTX+yPWqA5HfIQMmtq3FqrOJqOS33MdiwsMQmTIhHKYM0YFwvozi9J+RNKcEl5N2Qmoc Lfk7+rI/dORLohYDpnVT+A+c6wjEmOyRSm2L+/O6P2mGsOj5gk9vJBCQQYkgIYlhHnIJ+C0GML2v Z+o2eryY/pFqOmD9xx0Ss7CeORFmelZz+zuMJHLL+c/8csU4Hv8F19FiCvZOHVhNzd9xEtn+ivpg oEWrFeJ25K62CTShh6cJpFySLAbQQPdiobAEyC7N4t7Kl2OLmXNFq14z+myzCuuzkMMKG+0zjand ANizORJ4NuWzgP4pNqKT6UjZBcXENL+yDxcwww== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701172224 20190624172224 35721 pki.gov. DjsiCHd8qGbW6oPwB+mxhJKnLHUXyeMHPOwF608Pk4tt1aE7GQwhwNuysNyjHdz7kmMntCM+Vb4u yY2tCiMwGR0eUe9Ei8nh1HbHUcR2nHiAARDXnjn8oWlBl4FSqtS09n30TXJXwK9IvqdauIKyBd68 nq6RNKMQFcAs+0NmNCfEztmRv8+NCphPYOoQYzdDIjLhE8MLBKs96N08vJOW6JDSaRVE7kjjvZ1R nvr2AgGgTOmlVBHHXS9K5ukgBM8ADraNSZXWYnz46FGz0vFE/otssMyJz1zAkAsVYdNipRII977O qCTQdf5oFgVeXsiZO5PnohI6mmV/pN8tzM7VuQ== ) ;; AUTHORITY SECTION (4 records) PKI.GOV. 500 IN NS dns2.PKI.GOV. PKI.GOV. 500 IN NS dns1.PKI.GOV. PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190701011755 20190624011755 28950 pki.gov. JlNZ0w9phzPDXh97j+pdjKVfgRz0HvVJhajl0jDUWSrQT+NapkurMACXYTAdYoIZOSeBiuNMlMYx Vq6iqaDIFHMJFo5WJNXvcVstfG04pI6E/mswshXx2i2gDgnOi+oAiSLh89JlCV3Dzuu1JHbLZs7/ hOmlJGouXJOx4Ywz6t4uPKbj/ycgTpIOedSjDhRWTsP8QNjsoGjNuSYMR2p7KvnC3lfNAm7C3MDF pUUlS5ASmKUJbcT/+EuEVw2vf6h9Z1d5AjaY/HtcomoAZAifDIFpDKudbGQD2kXnniwN4qMkoXM1 7pG0VbT8pmi0YSb1ZmDbs3jK7cPcqjbf3GYtfg== ) PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190702000814 20190625000814 35721 pki.gov. HJnoz8F7klml1AsoB7N2cnbAknI0102rqaWeLV77/+KJF5aHv3269SgcpPd+UWPaBZPaTPbzbXa0 ApeONr8nB/wjIhFqYwBrteCh+4FFdtxuFyh1jkrmzh6nXV2laOkVNEHD1QFxfvQ7epjxffPq52j5 uuQdUL+dEz5hfh9CSPjpY/GC1o1Dj+6kD5tPm+/wsfY84NTGkRh1vmNqlQQyPtNttjShd1MDPH69 RZAbe5nwTls0T9/NbhiibStNrR2Ym5GvjEDOsifs1/8Y/QV4s06PsvjTILmS7mSnLKo1XxLdmax9 M3q2V4Wm7CDV8k0S8BJhGgwMSzNWHEfl/DTbiA== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI.GOV. 500 IN A 199.167.92.100 dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190701011755 20190624011755 28950 pki.gov. cBvsVYXUYKPBQ9eBYRyvTMt6R5AlmlZC+ux88vZEo5Iq+iw7mu0QUbQt0h1Jxmii20UIjqE3bbuO 6x18o+ar+9W1/WBR3xeTV14WckBCzIKGSrHCuvf8vYs41QCV/01zisDAFUPbMQeSdNjZp7yPcnTo NMQszBgQ5rA/04cemXOpQ030lizp9Mm6SJi4k+SqcDlPdrrW1q5wvZSrIIgVbP65ZSK1ZQImngIz YGLqobchSIZdLWWdlxNumekUnz6eDHL7MIApFQ2/FNz4DObenRLC2VSRy4JuUhWSJRMZ7lYLqhjP MqHyHt1pYLVZG5ullpF+QlqmKuFy2y0gmMvR7g== ) dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190702000814 20190625000814 35721 pki.gov. exMhPOLyqZ33VX+52GQtlXX0M/ZBPmf1WaYToikL8UxefN1R3e+P64A0DsS7Zk1/72DdIZ0Ju2gj rTeiB2eqiduXplU5dG1Z3U+iSNVbnunzbY7E7sJmihurLuO+pPfbhAepDf+Z1jMU5xvweII7JwZE x63pdk15rZ+Mx16kIIavnuvz0/tnonzz2Y6cBj2ldPw28biI8m/Kt6mFXpZ4sB/lqTur3ZzmMwZE ybz/t63i/FWS3lJgGPUViPRVG3pRWIMSIn0VGPaG532xeheED6C7czZGEPWMPAkt2dnlRzC9O9Bk nrUiN5cGA9AyyVRiIu86teDL1A3C7ZLzUuEfzQ== ) dns2.PKI.GOV. 500 IN A 199.167.93.100 dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190701011755 20190624011755 28950 pki.gov. M+BuSdAkXLGqVG0cLK74SHLu8pcjiDORz7fLuXK4Q+BpojhUXNrVpxwm5mCu32hMzGUUdo1tgaHY 1r9+20j0XR9ez07nIAmumYZjIm3XiMT1czKMc2qNkVEGKUfsZMUqTI3DN7PnGqKErgl7njTDrZO4 X08og+tU/W5ytE8d3fGItjil+WDh771UELzOuA3Ekde5lWvd6mibdce9fr06tsIhQINpHMrigKQD UYjtZRmBehc5qErDeOaqk1ii/QHoQAckJ0VHjwfy0VgLVhnmtRuvfXSS9DFaA/8opuQOUJwXpK0I oeWBrfv4BGeOvxKixzkQijPbFDUa61c4p/1EBQ== ) dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190702000814 20190625000814 35721 pki.gov. VmBLsW6RGGZ874GWB+RKu4WmIMM/EEZcb3P3BMEQW3POQ8ssytBBxGKLtrfUoatHKLGeaolTePDF Pszx+YWNCN2HXANIEXQ8c7eMLcil5J4rxFUbL6mSh4ATq9c+2kDSbQHRrPU+ltOvjCUfevb3lWyo D87nI2i27fsCZbkI7fdCSRVi/U68BnNWWtoXJ9QSeEB1sGuGSB7U2NCZhhsWnoFq7H/dKukomAJW opVnImGegUHhsvtGlHNIbDpjPUQae0JoyPclnvdcjMljhfBiAipZFZuD6Ozvqt1fOwGJtOuHBUHF 6cFfscYKNyrHVvV9YDfLT4sweaadWtMSslQfpw== ) dns1.PKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701011755 20190624011755 28950 pki.gov. tIXi54eZHZVns06mjS6lyv5RLCYokL2H9jKeG2ZnxOO2mmCKCYZ/suVQLnrpGZ0VvlfAFeSMMwHn YsJB4OX3bID77aCA8kv+30zLH4FWSymijH51p56AMczmJCSTQ9MKvvtH6eKhyzC22GeZdChqIvIE 4VB2eCgMelkbj1T9pCDyY1m1+wBjMws7SGLpEN8jDchmixwGed+h5L4G7npqs22NIC+0feMBK2xA srjtG70McXjOXoDKfG/emEFXBEGrwxjSCTYR5P36Sea6rfJIRZ7gvIU6UNnRk1BIlbs0OUjubEg9 qhqqabVvJ3bn/GZunzwaqSiDPtOTXFppUJmWSw== ) dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190702000814 20190625000814 35721 pki.gov. RZ2f2kmS7fy0kxf/VidaOhP9UnYA05+vyPGK+w3e/4cCl/qhcViroTd2Ro/R9scOGVO9q8mg69lT qECvJG7bZielQGzObZhktZNKTwbihEia0Vud6NijwtDcjI/Zvmh0wh383jwaEl1p3n4n4oxoL68+ BwKtZEGvymkjYw8V3GdN/ZZ1amtXkszRPkpQ/F1oa3OgnMsG2Plxp0FSKwQm0jQS8/cQE5VMG0OW CdEQky6CmOOQheaf3qhwlaD1g8GysLuwafBoCcAfmWWQNCZbRZykClwUCvF5UFJ1iehIFrRdans5 iaU/KT6nANfEbF8Nd2qXRTo/UYtRt4bBpRBuuQ== ) dns2.PKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701011755 20190624011755 28950 pki.gov. btW9l/v2T4McmMWVccMiYp3dBKWRF2umVzj0q2iFYglOofx/OKtJiukJI167n0BvAfi3neEBXPyQ k+SF1y8sR7iZI6BlBcz5rtRkgubgH0BxzYw+bYTtL8ke96tLD8S8wbu6PxClnODgtzjzdx4RDKp8 CP2khDghdqfKPQI6WXGppny2qIb2NdbvAyS7eATwPd5I55mcgVZnq+HK20l4KG6JQOCFgab2A+Bm lSeqxlsCimyoinWDKIbn6/BNTQdgMyFrVuRxLPUfEWjPrK/y2d+1++yNGqi5TUqabTMwQB26gfTI 2aIWRpB+T2rjOMRpot2K19O6EVAD+qDNH9C7xQ== ) dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190702000814 20190625000814 35721 pki.gov. BuP5GmoQ7Rk7nmnlRggCKEd+nfNQJ7h+bMlSDxOEg2Q+V/H72sTv1bPOQHhg39DbAjnE15lBNzIN Zel/cVjNlzXcnSTHubehOXqOLNuDf2tCIGec4+GxRu4R2LpJ5etujjiyYGZVnpqgGuV76Df+TQf8 MogpucZd+4v01OrF5q0x5CKtCsc4wPc3aGBgqyJCVfMQIzWYeUiN9ioa4S6Bbj3SBU6c49caR388 e5JvzmfUNJ+/7bTvut7A05I4DZ7opoj9TkRHqNZKj96xAfIBfxbI+2R1ucl+ZlfP6XK9R2CIdHoI gvpGdGDEeTjWhQ2ISQGzmOkGjEz27yWOXQ6LbQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.PKI.GOV for PKI.GOV/SOA
	Received 3749 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3749 bytes) ;; HEADER SECTION ;; id = 7266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190630202921 20190623202921 28950 pki.gov. I+QKazxU6n191+pcSRsyCqw7hqewEMckvTnK3tFgQDTHe8UWQsR7tQFnhlZqH6XY6uMRqR6x2TQ3 2PQhNWJ3asTHeeJu4ll3qP5R+mBBg2Ie10eDDufERErYeWPD58RRIAHiwBc6dsJYEXIc/Mp1yJEc RdWxlFW0xYtHFvKW814G9Bw698/aOVvlhw5yfuTOnG9Fg50xxCkGt6y0IbdV1NUgT9hN8y4qlweh iWuljzgaDyovqUcejnGIQlKJ4mQDldLKOxHRtX9hDRu20OCXsRXYp9p04FFlpi22XLJ38TNEc5MD hI4rnBr4ctNRMJooW9y4OkZKST3ImOS6SjbNcw== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701174126 20190624174126 35721 pki.gov. WAZSnXWvt7rKvJkb+lClv/kQR2U9+Vgzbkzyr3SaLnmVOpt9QooTkiyIF4GXVEcIpXueFHvAcKP3 yerxuj3/uNi1Txk8/Qc2+4cHAK3lBYG6uVuPf47CJT0YobK7HysCu+84/u3I5q8NxR71/Erm8sxt BM8+kxTKT0sf+fnzwtErZXyoKnhOcKV1Nj4cWRVpmOdMDDYCFNdOzk7qhns04X0R2gxOiFQNRheJ l1qoCiYStiNF/d/Tr62fAbzbzZ35HS+bI0vGXJZ5QGX7NNk9XJ3F31QbZvzHpVvFBalyKishVow9 3qzYCCVP51UGOBdaIDbG1FWdPy0orVQqo9exsA== ) ;; AUTHORITY SECTION (4 records) PKI.GOV. 500 IN NS dns2.PKI.GOV. PKI.GOV. 500 IN NS dns1.PKI.GOV. PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190701132705 20190624132705 28950 pki.gov. NVm2Mfddz8RyaP42oYbal4DChAJeRWWPvwJc0iC72RXQzU2/SDGCQLmXcTZm4aoQCYYqFo0GVfFD 8J2qPf81fhFtAdJBtNLU7qfnqi3M+50dCka7EDsMb8PLAYLwLdXVBQEDaDnPWN962I3VTqHhJ/gS PnQa5DUW2ofrtXzH5OIlhzypHBCo/F/S0L9UYtOSRiTuwxd33lSBWVKOoTB8rJmw5clx3rMZLJym k4FJsHDwyr51hAAjBSXtJphUKnsyhr+LFYUnX9TLXd0wfAP8ral9CaZJ6v3m8jXYzZ2J9r9BG249 dgSyP5mxkhahSonk4CI+DwNZTaiNb78IoXsoTQ== ) PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190702013015 20190625013015 35721 pki.gov. XCkdfjDADJFuPu6MyoRd5gaD/gwuHvYa1ZTPjXohrN+UV9vdt7jzxAJwEhfVcvkvLUL3v/K550Wy HvjkX71GB/R/nFJueaUAnAg2rJm1OsVjqyMnOVsEaHIM2csIvkRlUCjjwrSOnWfIy96GEbaxij3l ZLlbgV3E7qwWix8t1c1KiWBRCYTESOKTuUdlhwi8yuKUfG6VLyKHfm+yoDJ0Y0VwyiYtwN3HfNOI arm8/oV7GoM7yGCBWd+5j9tYvIhRymlzWNM28evEz5QGN6jh/CcTyEVGoZqPCSTo+5t9hiUPyit+ f5bqzvKWyM1lUuW2z65p1Fp1133EdntEp1e1kw== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI.GOV. 500 IN A 199.167.92.100 dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190701132705 20190624132705 28950 pki.gov. YPM77rQnjyaEHzGjYHOOC0Lu4xa7Ycr0+LKBV0suBz6XUSeaKhtrU560TDbTfxaV7msXaXfPXD3I H4uCnvtVg/Lbpzo5z/im5TZz2CrG3PTxMfqI/49KRc644MrfqIeKfKRBV/C/soLL9sYOFE8uO2hx GdjD7eMzKhCNgW9KpP5JRF5jz05Nx4u0gM5Wkx9h0INwxbsLEnJUP0XC1+6iu1KWQUqN9CyxzyZ/ E7aAD9FkZY48yA9Hityh/ZGkNI0Bm1yvYu6ZJ2x3OvDV1JO9CDrCPZ9iHcO3iDTwgPY4XX456OXI fYFQzene0zf35XQffBXM0F4LCRk+dRi6DBUbTw== ) dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190702013015 20190625013015 35721 pki.gov. LhB9taAxpkdVbuAireAmW0WvVyqsSvYKXwW1wGlgD2+OTHUTGuboQsQyRA1A57pefAcC4jIRHJYJ Vb3Q8YqhUl2t8cC2qMPZQKIY31jAr4Hy4wJVRMCcymFaDnT1gfkTmjgk6mJo/W0BbOJofrghyfzy 0CXZa8EuqWwFHAkqzQsKn/cfgqvmA3i9fQ5tGYkW8IhISijCXydGHd2hCWSVrM5AByhi+m68ltlW RdVxd5O5/uExlTiDJdsrqpNavmp01TZex7cDKtQNWsCO1bNrhPKqKHwrUCpgrHEg8btajNbma0ZA zP6XrqHQ9WvLLsbfQ9NoQPZEhvANY0W9jsjsaQ== ) dns2.PKI.GOV. 500 IN A 199.167.93.100 dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190701132705 20190624132705 28950 pki.gov. ycBEYqBHIdCxaqNCnkPdHFzZPmh0dHUCZYkAIbVT1Vtfw2KKewIuLqoByKc5N6vvSBhy/Xu18HTj CSzD2dXROYsq3tjaE27yHSRSBz1rKP7GAARR89SBinhLsEGsG/OYkMQAGM/fwli+3lC4tTtjPvCr lCWZNLAqeFCxWqO1jKivfLsUhSXLm+XBYkLnTYXcQaLI9tvSwbCCkPivjgCwEHCCM47ZjeQ8hpWY iHo0yyxGVJtVZ7fTXLxRpLiDkzx4QXIwsm+XUVm+BhGB2bTpMQY3xi+XG6wKulw0iTQ2ZCGLA85C t7KLxgd84kGszMctL+O4LCBzrMb0ByB9JPmr3g== ) dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190702013015 20190625013015 35721 pki.gov. E9IUgvHsbo+EOiKn18WqFT/7uN6z05GEJIHL7JleD5oEUB6QWCTI+MT8ACmRMchB07YGyRhwdk/U ZvrY6QZJ+MHDzUl+vvZvCbUE+QvQsmFStFQ0yqUzAqOd+lvL5YPOrJFmO5ZZRSOYWZIbJ9KH1Q2M jW+ScxaEwoabQsoKAdVgz4BhiwobXXBPu90j8WfjudP8E/RjpgCotPH2qkD4q/uHyDHKGbvMbAa5 UPSkGaGmkDH3EjtBl3kR5IQQxE+Z9y9jiY3WmMmbVaai9oJsU8tnCpdcZm0vS5J4nERm6TR7QwTH rz29mp2DB6QA9zVcXrqkzLEW1rY+SbkRKIVpog== ) dns1.PKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701132705 20190624132705 28950 pki.gov. tJ/m+sOdUjlREopVdBd/hssjEuEAyDJSXljVed6DqtaQHwF/lags2NVf/4FCfEwY54mOFVEc7eyE 8LlbmtX/OyYAaW+naRM936NZXvUnQZxdGiJ+7vn8HkeNGQL2/pgSH5FuxQycaNSNAFHbGkNpD1QW GYx7eix7+6+QIKpA2VKnYMpI86yDG6ikdBJFrm7EKbv0RLCla00200RT4vsgDPwhs8/zgFZyCAOk kbudwqO7QEkZiNBxJ98fvcKIPNH69tdjk1k30SnakRBzMofev28LIgp8ILaQSfxz+UWob0/iVXCn YrmUFARoNsAe46U6FfkkVfXWU0ZTK8dDI9qxUg== ) dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190702013015 20190625013015 35721 pki.gov. K/JHWFBhS3rsr+gxMbME8BRKmoA3H4pKp9Ue+Z4p33B1zFOv0rxGYN433t+zsRitRu7g95CGd2m2 W+0gdYJ2RpxgFhmmul2jYwm/uiEl3Sm3DyHWx+1evxW0eODrh6iXXTREswAFEChhaUo7T4P03toF gx5hAfdYbwgYXftJbqDWUfgwsbK9FbiOCksOy3cFwY2MselybR/4M26fjF1gcby5vlSLxNZJmNjI UgcmtsX64ATfMp8u4Cyv2L0CZq2Q0R2qdSatobn3iF0tjK7CNXT9AJYTS8j1uvxBKW+lekSOzNPX 9o1yw9jBbKV5Y0FOQlp6JmGzDOirv3PQUM80+Q== ) dns2.PKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701132705 20190624132705 28950 pki.gov. P60sacm7Amz1/n0iOYsBXHfr2NYSifvwbSeq3NCMKGshFJP21B2pBaoYBvi1Sz4i29AKlDEQaW6T S2yB1yW/T5X1wJvO2rwaL8vL3e6DUEPadW0RwRqJXwclU2K5JJeYTkt8j/eRa23cK2zfrSZlzMDQ pKHi9OoK9T3c9pJC+mSxqAAa5+zAAnqcfL+rhQN82SW3NhzBPejNqLuJ3jGbNDege/T+yI7B4uEI TAcNV1ogdKD0cbOSu2vriF3zjabOkOr+ezojKQMLUwNiEqhHVz4nlWsdB+tjSmsoVxtq7mUTXmM/ Wut5niddzN6PCAjUQJdfNb9J4QRghzN7beSnWQ== ) dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190702013015 20190625013015 35721 pki.gov. oMkDRc24ke52//dN/eZTHqSe/0xbx+HEtxH8MjqSysbc7IfQmyqRZ0eNqyubM0wFD/5+YAVWj529 l0dTDBz+eKLcLMe1Lo8Xfe4rIgyhXZjFjof/nMqGaFJNw5ecdgo7Dw3F2e0vu1iPcF2wB3T3x/wG v8XGt4+rWziPMuDpgjPL5v9qpmjaKnVLBw3m1I3qbLgo4tie9lPNEwqRCGvHizlaDw0XU1m5MSqf fg/UspFzgZMWPEyxA2+mnbonDeNFT0Omr43epMSGNtTBvTBdYASybAFLkd06xCWVO3aTCCUZKMDW cOdpqS8KHC/KkJfJxdQibDw4tFWUPWYMJAMt4Q== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.PKI.GOV for PKI.GOV/A
	Error querying dns1.PKI.GOV/2620:9b:c000:9200:12:0:0:30 for PKI.GOV/A: 'IPv6 transport disabled'
	Received 1356 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1356 bytes) ;; HEADER SECTION ;; id = 13527 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190630202921 20190623202921 28950 pki.gov. I+QKazxU6n191+pcSRsyCqw7hqewEMckvTnK3tFgQDTHe8UWQsR7tQFnhlZqH6XY6uMRqR6x2TQ3 2PQhNWJ3asTHeeJu4ll3qP5R+mBBg2Ie10eDDufERErYeWPD58RRIAHiwBc6dsJYEXIc/Mp1yJEc RdWxlFW0xYtHFvKW814G9Bw698/aOVvlhw5yfuTOnG9Fg50xxCkGt6y0IbdV1NUgT9hN8y4qlweh iWuljzgaDyovqUcejnGIQlKJ4mQDldLKOxHRtX9hDRu20OCXsRXYp9p04FFlpi22XLJ38TNEc5MD hI4rnBr4ctNRMJooW9y4OkZKST3ImOS6SjbNcw== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701174126 20190624174126 35721 pki.gov. WAZSnXWvt7rKvJkb+lClv/kQR2U9+Vgzbkzyr3SaLnmVOpt9QooTkiyIF4GXVEcIpXueFHvAcKP3 yerxuj3/uNi1Txk8/Qc2+4cHAK3lBYG6uVuPf47CJT0YobK7HysCu+84/u3I5q8NxR71/Erm8sxt BM8+kxTKT0sf+fnzwtErZXyoKnhOcKV1Nj4cWRVpmOdMDDYCFNdOzk7qhns04X0R2gxOiFQNRheJ l1qoCiYStiNF/d/Tr62fAbzbzZ35HS+bI0vGXJZ5QGX7NNk9XJ3F31QbZvzHpVvFBalyKishVow9 3qzYCCVP51UGOBdaIDbG1FWdPy0orVQqo9exsA== ) 17mpjsltit377bt0tgc7kq6t0lvsho90.PKI.GOV. 86400 IN NSEC3 ( 1 0 1 088a49403d1b47f8 17mpjsltit377bt0tgc7kq6t0lvsho91 NS SOA RRSIG DNSKEY NSEC3PARAM ) 17mpjsltit377bt0tgc7kq6t0lvsho90.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190630212509 20190623212509 28950 pki.gov. nNPJW7Xk7Zx5zrHc2OhTODUFN1NmpU8W5GuR1FRWzf4xNAfqBbpPnbVzo6moLdW8O9ha4qiWtQxJ +xMGseUgPn4O3I4z03EGiXjGPcT8Q8ryg7QQ/KvASjDEvdbnMvfrNWPtUzl4g5HA7ubyGuZrlX6b vQPRONjpeV+ruxzG7w7xiO+SdiWK2OD7LOfVFY1erWLm0fWWRmLJ597yYCaC10MR0Pf3R9ZzbiQT PGkgNsKHhSNS8akakBChNxGG0hwNLx7vZ3keC7IVyVQxSxq6fYvndmeAHbm8bNvP+warT4BxWMJ+ zkURK7n+9lnXlO12xB8wyeLsn1AWWXmZQcu/4g== ) 17mpjsltit377bt0tgc7kq6t0lvsho90.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190701185823 20190624185823 35721 pki.gov. hzlH6ey7Ifah2kL7q4/77QrN1coX2dYncOpC7jSKEL0U6e3PCGe3PGPjsr36fPIXGPC3BzQaHuDf 4b+x9wi7cPhjcNCR5LvZ0wWcMIPpVjqjHhe4VdEVVVVGwBrN7DmpStGM51f6Vb1NtD4RF6ZDjQuP +h1Hr+rMBe2fabhvpLWx7CC2xqjqLV+5arRD20y/1bxlBBWjq9UWU37Ixq0hTWDQk9gyXzuAu6/h +R5MBz0x+H5F0jGwADDVSliFWh/9B6TzKwJw015zsIycbw14vFtDX6v0WeNDN/hxdTD93FN/hYTe nBiBlENRepXrEpk9muVtXfeGDa7mLB5boKeicg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190630203551 20190623203551 28950 pki.gov. B/EZPlFsWzX1S4dFRaTP7FVtNPzFLNgBmg1i6Z21oLXuD8i76vEGm6jFJlIrnFroFK1bsLlPd67O /RjYC3ENVE4pPE8eRoMetbjuXDRsolQM5MnRZDR7/BXgtfmoMQ1GTN8BRL7hc0/RgFMngpfvagtl XG5TyyRxUrMVQV5QjXky344qVKVrUJMdqlnPofolzSfTCHPccot1bxazIOuJoSU1jCBlKmgrp53I JIkS6MdZLjZ367NANdgy9+I9/gn3EyN4N8Q+fwTfHsmcJPGI2Ev+Hunuxo+lIHT6y1GGxxS9PlO2 0LcQ52qSI2qwDtH0VujNN4/85i0UFAAi3MtpoA== )`
	`PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701192513 20190624192513 35721 pki.gov. OujLdaPH+wx6J+pIAbdmYQhD/bdUCazhYhKJnQjhF2spkxP0VITDUNTrjvnZg6OADQ+RNhAfMXx6 dxJ54lIVTF/VK8AJgCDdkwvndR81SAnrRmI7PyLjC+1oHJ4FRejBLqRjcB80MCNeOq1n5lAqfDbv zj/KP2WCHloOEqobuGn4xDdSyG3q5swizRdReLJ726k3hXgx0yBnaqVzcLRSLaMao090W0ULX04+ +/kUuVGswgUzfBMpS8w/AFdou+QGbUSFRT5p0tATr5akmuuJhoObxfEde17RubV+0MlAjCr6gwhZ rau8UyIc3CG7pf8CDATIG8D623czZhvppywiww== )`
	RRSIG=28950 and DNSKEY=28950 verifies the SOA RRset
	RRSIG=35721 and DNSKEY=35721 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: